Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f392bbe2-7829-4aa4-83d6-389b02ef0dde.roa
File: f392bbe2-7829-4aa4-83d6-389b02ef0dde.roa (raw, json)
Hash identifier: pNJidxwabrlqTqaTOHnfEWOz5RHIo13WrmldZOTuWJs=
Subject key identifier: A8:BE:EB:2C:19:78:7F:81:5A:5B:0C:CF:DE:59:B9:C7:38:57:0E:EC
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 7B61657B8375BEE9B98B59B925F5461D8DECD137
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f392bbe2-7829-4aa4-83d6-389b02ef0dde.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 173.82.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:61:65:7b:83:75:be:e9:b9:8b:59:b9:25:f5:46:1d:8d:ec:d1:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: serialNumber=9b4ed3fe8b150d6f6684d4ea139b0e25740239d531c9409db1a10445702a6785, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6c:43:af:50:fe:f9:e2:1b:bd:a0:77:0f:c9:
29:0e:1f:ba:3d:25:bf:44:d2:62:31:b9:70:a1:94:
f1:c1:ba:75:de:b3:61:95:90:2d:dd:f7:1e:b0:e9:
4b:c7:27:4c:b1:63:b0:8f:99:05:2d:55:9c:c8:e8:
a0:47:88:70:b8:d3:32:63:c7:d9:1a:8f:fb:d4:4b:
cd:22:9d:2f:4f:d1:5b:13:8f:cb:d0:2e:b6:cb:14:
1b:75:a4:26:ef:cd:74:9d:fa:e7:20:a6:49:dc:c4:
a0:9b:1b:39:8e:22:44:ef:6a:7f:8f:08:c5:de:c2:
3c:28:ce:b1:96:9b:b3:3f:da:71:ab:0f:d5:44:b1:
f3:81:c0:2c:40:73:27:57:41:78:8f:75:09:ea:03:
9d:9a:3a:06:ba:56:01:8c:f8:95:1d:3a:a6:70:35:
5b:79:b8:e1:14:82:d1:e4:ed:b4:c3:a9:07:af:8c:
6f:d1:a6:a1:15:5f:72:e0:5b:97:d5:53:25:b8:ec:
e3:00:2f:52:a1:64:2d:89:f5:0a:fd:a8:2b:5d:c2:
c7:9c:19:f0:2c:9c:a4:ed:3f:41:b8:f9:6c:0d:29:
76:f8:a2:86:f6:b5:26:3e:f9:67:03:93:09:eb:1b:
57:92:07:84:41:6f:3f:a0:fa:14:d5:ed:5d:2b:ec:
80:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:BE:EB:2C:19:78:7F:81:5A:5B:0C:CF:DE:59:B9:C7:38:57:0E:EC
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f392bbe2-7829-4aa4-83d6-389b02ef0dde.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
173.82.62.0/24
Signature Algorithm: sha256WithRSAEncryption
09:92:bc:02:8b:09:f3:66:b1:1e:33:6a:a4:9a:3a:d5:e5:9c:
9e:40:e4:b8:d7:25:f7:3c:9a:b6:fd:16:00:77:65:f7:fb:20:
6d:cd:51:f8:b4:67:5d:a2:47:3b:7f:82:af:fa:35:4d:8d:fe:
66:b4:7c:5d:46:7d:db:69:86:cc:f8:cf:bf:71:d5:50:22:dc:
8c:af:a5:5c:6f:f3:c4:ec:47:f5:ce:f9:96:e5:30:2c:05:e2:
ed:20:8a:ae:90:ed:5f:99:1d:a4:e0:cc:8a:5e:ad:84:f8:f4:
d4:b3:4f:33:84:42:db:13:6f:96:43:b2:dc:d8:0c:3d:32:16:
6f:43:5b:22:e8:dd:33:81:ba:b7:a0:0a:2d:9d:c9:d2:8a:99:
e9:96:98:aa:4b:ff:e6:8f:42:62:13:1b:9d:b6:8f:0d:e1:50:
51:b1:a1:c7:34:14:be:1e:8f:22:f8:4e:0f:c3:61:f4:b9:e5:
09:1d:fe:6f:ac:5d:84:86:35:32:34:be:6b:29:60:a4:fc:58:
58:59:18:8b:7b:67:11:c2:8d:b2:1f:14:4f:ec:6c:2e:34:41:
37:b8:d1:a8:e3:94:ff:c0:d5:06:f9:f6:56:af:86:f3:57:c2:
c4:6b:3e:37:73:22:95:76:60:05:31:3a:ed:90:29:5d:63:2c:
9d:21:f4:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 04:38:20 2025 by rpki-client